4

We are looking into rate limiting some specific IP addresses down to 5mbit for various bandwidth reasons.

Is is possible to rate limit ingress and egress traffic for specific IP addressees on the 2960S and 2960X series?

We know we can use "srr-queue bandwidth limit 50" combined with "speed 10" to limit egress traffic on a interface to 5mbit, but this will then apply to all IP's and not just the specific ones we want to limit.

If it is not possible, any chance it would be possible if we changed the SDM template to "lanbase-routing" as that enables some layer3 functionality?

  • 1
    You really don't want to do this on your 2960's... – cpt_fink Mar 2 '15 at 5:04
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 7 '17 at 18:40
3

Try something like this:

mls qos

ip access-list extended ACL_SLAP
 permit ip any any


class-map match-all CLASS_SLAP
  match access-group name ACL_SLAP


policy-map POLICY_SLAP
  class CLASS_SLAP
    police 8000000 100000 exceed-action drop


interface GigabitEthernet0/2
 service-policy input POLICY_SLAP
| improve this answer | |
  • Well that works, but in the wrong direction... We ended up using almost this exact config at a different point in our network on a 4500-X switch since that supported "service-policy output" – mastrboy Mar 5 '15 at 10:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.